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SPECIFICATION 



TITLE 

FEE MANAGEMENT FOR PROGRAMMING OF ELECTRONIC DEVICES 

5 BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The field of the present invention relates to the 
programming of electronic devices. More specifically, the 
field of the present invention relates to upgrading programs 
10 that are executed by electronic devices and to loading data 
files into electronic devices. 

2 . Background 

Many electronic devices are designed so that their 
program and data files can be upgraded or reconfigured after 
15 they have been released in the field. In some cases, 
vendors provide these programs and data files for free, and 
make the files accessible for downloading from a remote ,host 
via the Internet. For example, the Microsoft™ Internet 
Explorer program can be downloaded onto a user's computer 

2 0 for free via the Internet. Once the program has been 

downloaded, it can be executed on the computer onto which it 
was downloaded, or copied onto other computers and executed 
on those other computers . 

In other cases, the vendors charge a fee for their 
25 programs and data. Typically, the fee is charged before the 
program or data is transferred from the remote host 'to the 
local computer. Here again, once the program has been 
downloaded to the local computer, it can be executed on the 
local computer, copied onto other computers, and executed on 

3 0 those other computers as well. As a result, even though the 
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vendor has collected only one fee for their program or data, 
the program or data may be used by multiple end-users on 
multiple computers . 

When the data or program is large and/or the bandwidth 
5 of the local computer's Internet connection is limited, 
downloading programs and data over the Internet can be 
annoyingly slow. For example, downloading a 10 0 Mbyte file 
over a 56 Kbps modem link takes over 5 hours, during which 
time a phone line is usually tied up. One way to deal with 

10 this shortcoming is to distribute the data on CD-ROMs, which 
can store over 500 Mbytes of data. This arrangement works 
well for programs and data that are distributed for free 
(such as the program for accessing the America Online™ 
service) , but usually not for vendors who wish to get paid 

15 for each installation of a program. 

U.S. Patent No. 5,809,145, which is incorporated herein 
by reference, describes a system that enables a vendor to 
distribute data on CD-ROMs, yet still exact payment for use 
of the data. Note that the term "data", as used herein, 

20 includes program files and/or information that is used by 
programs. The x 145 patent teaches encrypting the data on 
the CD-ROM, and selling a decryption key to the user. The 
purchase of the decryption key may be transacted over the 
Internet. Once a decryption key is purchased, the computer 

25 decrypts the data and copies the decrypted version onto the 
computer's hard disk. A shortcoming of this system, 
however, is that once the data is stored on the hard drive 
in its decrypted form, it can subsequently be copied onto 
another computer. As a result, a vendor may not receive 

3 0 payment for each copy that is eventually made. 
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In some situations, a computer is used to read data 
from a data source (e.g., from the Internet or from a CD- 
ROM) , but the computer is not the ultimate destination for 
the data that has been read. Instead, the destination for 
5 the data is an auxiliary device that is distinct from the 
computer, and usually capable of operating in a standalone 
mode (i.e., independent of the computer). With these 
systems, the computer is merely used as a means to get the 
data into the auxiliary device. 

10 With a first class of such auxiliary devices, the 

computer sends the data directly into the auxiliary device 
via a wired or wireless communication link. Examples of 
this class of auxiliary devices include personal digital 
assistants (PDAs) and MP3 players. For example, application 

15 programs for PDAs (e.g., a Palm™ PDA) can be downloaded from 
a remote host to a local computer via the Internet, and 
subsequently transferred from the local computer into a PDA 
that is connected to the local computer via a cable and/or 
cradle. In this case, the ultimate destination for the 

2 0 program would be the PDA — not the local computer. 
Similarly, MP3 data files can also be downloaded from a 
remote host to a local computer via the Internet, and 
subsequently transferred to an MP3 audio player (e.g., a 
Rio™ MP3 player) that is connected via a cable to the local 

25 computer. In this case, the ultimate destination for the 
data file would be the MP3 player. 

For this first class of auxiliary devices, it is known 
to place data on the Internet, and make that data available 
for downloading in exchange for a fee. The data is 
30 downloaded into a local computer, and subsequently 
transferred into the auxiliary device. The user is charged 
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for the data when it is downloaded to the user's local 
computer (e.g., by charging a credit card account). But 
controlling access to the data at the point of downloading 
to the local computer from the Internet is not ideal, 
5 because the data could subsequently be transferred from the 
local computer into more than one target device (e.g., into 
multiple MP3 players, or multiple PDAs. As a result, a user 
could obtain multiple copies of a program or an MP3 file 
even though he has only paid for one copy. Controlling 
10 access to encrypted data on a CD-ROM using a decryption 
process that writes an unencrypted version onto the hard 
disk of a local computer is also not ideal for the same 
reasons . 

With a second class of auxiliary devices, a computer is 
15 used to program a plug-in module (e.g., a PCMCIA card), and 
the plug- in module is then unplugged from the computer and 
plugged into the auxiliary device. The auxiliary device 
then uses the data that has been written into the plug- in 
module. In these systems, the ultimate destination for the 
2 0 data is the plug- in module. 

Traditionally, upgrades to plug-in upgradable hardware 
have been implemented by distributing new plug- in modules to 
the end user, and asking the end-user to replace the old 
plug- in module with the new one and to return the old plug- 

2 5 in module to the manufacturer or an authorized service 

center. This approach can be used to insure that the vendor 
is paid for each copy of the upgrade. However, due to the 
cost of the plug-in modules themselves, it can be expensive 
when an end user fails to return the old plug- in module for 

3 0 reprogramming . in addition, many people do not bother to 
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order upgrades, which can result in the use of outdated data 
by users, and lost revenue potential for manufacturers. 

The inventors have recognized a need to upgrade 
programs and/or data in standalone devices and in plug- in 
5 upgradable devices, while ensuring that vendors are paid for 
each system that is upgraded. 

SUMMARY OF THE INVENTION 

The present invention relates to writing data into 
memories in plug- in modules or in other target devices. 

10 One aspect of the present invention is directed to a 

method of writing data into a memory contained in a plug- in 
module. In this method, a plug- in module is accepted in a 
connector configured to interface with the plug- in module. 
First data is read from a data storage device, and an access 

15 control code that permits generation of second data based on 
the first data is obtained. Second data is then generated 
based on the first data and the obtained access control 
code. The memory contained in the plug- in module is written 
to based on the generated second data, and access to the 

20 second data is subsequently prevented. A notification is 
provided after completion of the writing. 

Another aspect of the present invention, is directed to 
a method of writing data into a memory contained in a target 
device. In this method, a communication link is established 

25 with the target device. First data is read from a data 
storage device, and an access control code that permits 
generation of second data based on the first data is 
obtained. Second data is then generated based on the first 
data and the obtained access control code. Signals are 

30 sent, via the communication link, into the target device. 

5 
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These signals include instructions for writing to the target 
device and are based on the generated second data. Access 
to the second data is prevented after execution of the 
sending step, and notification is provided after completion 
5 of the sending step. 

Another aspect of the present invention is directed to 
a method of writing data into a memory contained in a plug- 
in module. In this method, the plug-in module is accepted 
in a connector configured to interface with the plug- in 

10 module. Payment information is provided to a remote server, 
and authorization to proceed is received from the remote 
server. Data is received from the remote server. Based on 
the received data, data is written into the memory contained 
in the plug-in module. Further access to the received data 

15 is prevented after the data has been written. Notification 
is provided after completion of the writing step. 

Another aspect of the present invention, is directed to 

a method of writing data into a memory contained in a target 

device. In this method, a communication link is established 

2 0 with the target device, and payment information is provided 

to a remote server. An authorization to proceed is received 
from the remote server, and data is received from the remote 
server. Signals are sent, via the communication link, into 
the target device. The signals are based on the data 
25 received in the receiving step, and they include 
instructions for writing to the target device. Access to 
the data received in the receiving step is prevented after 
execution of the sending step. Notification is provided 
after completion of the sending step. 

3 0 Another aspect of the present invention is directed to 

a method of using a computer to write data into a memory for 
6 
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an electronic device. In this method, data is loaded into 
the computer from a data source, and a removable connection 
is established between the computer and the memory for the 
electronic device. A determination is made to see if 
5 payment has been made. In response to that determination, 
data is written into the memory for the electronic device, 
via the connection. The removable connection between the 
computer and the memory for the electronic device is then 
removed. The electronic device is then operated 

10 independently of the computer using the written data. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a schematic hardware block diagram of a first 
embodiment and a second embodiment of the present invention. 

FIG. 2 is a functional block diagram for the first 
15 embodiment. 

FIG. 3 is a flowchart of the processes implemented in 
the first embodiment. 

FIG. 4 is a functional block diagram for the second 
embodiment . 

2 0 FIG. 5 is a flowchart of the processes implemented in 

the second embodiment . 

FIG. 6 is a schematic hardware block diagram of a third 
embodiment and a fourth embodiment of the present invention. 

FIG. 7 is a functional block diagram for the third 
25 embodiment. 

FIG. 8 is a functional block diagram for the fourth 
embodiment . 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
In the first and second embodiments illustrated in FIG. 
1, a computer 20 includes a modem 22, which enables the 
computer 2 0 to establish a communication link with a remote 
5 server 21 via the Internet 23. The computer 20 also 
includes a CD-ROM drive 24 that enables the computer to read 
data from a CD-ROM 25, and a PCMCIA card interface 26 that 
enables the computer to write data onto a PCMCIA card 2 7 
that has been inserted into a PCMCIA slot in the computer 

10 20. After data has been written onto the PCMCIA card 27, 
the PCMCIA card 27 may be removed from the computer 2 0 and 
inserted into the target device 28. The hardware for the 
illustrated computer 20 is widely available off-the-shelf 
from a variety of computer manufacturers including HP, IBM, 

15 Compaq, and Apple. 

In alternative embodiments, other types of plug- in 
cards or modules may be substituted for the PCMCIA card 27, 
as long as the interface 26 is modified to match the card or 
module. These alternative plug-in cards or modules may be 

20 custom-designed to interface with a particular piece of 
hardware, or may be designed to comply with an industry- 
standard interface. Similarly, other types of data storage 
media may also be substituted for the CD-ROM 25. Examples 
of suitable substitute media include floppy disks, hard disk 

25 drives, and magnetic tape. The storage media may also be 
located at a remote location, and linked to the computer via 
a suitable network (e.g. the Internet) . Of course, when an 
alternative media is used, the CD-ROM drive 24 must be 
replaced with the appropriate hardware for interfacing with 

3 0 that media. 
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In alternative embodiments, the Internet communication 
link between the computer 2 0 and the remote server 21 may be 
replaced with an alternative communication link. For 
example, a direct dial-up modem link may be established 
5 between the computer 2 0 and the remote server 21 via the 
modem 22, or a hardwired connection (using, e.g., wire or 
fiber optic cable) may be established between the computer 
20 and the remote server 21. Of course, when substitutions 
for any of the components illustrated in FIG. 1 are made, 
10 appropriate modifications to the description that follows 
will be required, as will be appreciated by persons skilled 
in the relevant arts . 

The purpose of the first embodiment described in 
connection with FIGS. 1-3 is to enable authorized users to 

15 load a program (or data to be used by a program) into a 
PCMCIA card 27 based on data contained in the CD-ROM 25, and 
to prevent unauthorized copies of the program (or data) from 
being made. One preferred approach to accomplishing this is 
to encrypt the data on the CD-ROM 25, and to prevent the 

2 0 decryption of the data and/or the writing of the data to the 
PCMCIA card 27 until the user has paid for the data. In 
this approach, it is envisioned that the data provider will 
distribute the CD-ROMs for free to a relatively large 
audience, and encourage them to buy the information that 

2 5 they wish to use. 

FIG. 2 is a schematic block diagram illustration of 
some of the processes implemented in the computer 20, and 
the flow of data through the system that occurs when those 
processes are implemented. It is best understood when 
30 viewed in connection with FIG. 3, which is a flowchart of 
the implemented processes. In the following discussion, 
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ordinary reference numbers can be found in FIG. 2, and 
reference numbers preceded with an W S" can be found in FIG. 
3. 

Preferably, the illustrated processes are implemented 
5 by an application program that is executed by the computer 
20. This program may be started in any conventional manner, 
such as by double -clicking on an appropriate icon on a 
display, or by inserting a CD-ROM into the CD-ROM drive 24 
on the computer 2 0 and closing the drive door. The 
10 application program preferably includes a plurality of 
software modules including a user interface 31, a decryption 
process 32, and a card programming subroutine 33. 

In some embodiments, both the application program this 
is executed on the local computer 2 0 and the data that will 
be written into the PCMCIA card 27 are stored on the same 
CD-ROM 25, but in distinct files. In these embodiments, the 
program instructs the computer 20 to read the data file from 
the CD-ROM 2 5 and to generate corresponding write data for 
the PCMCIA card 27. Optionally, two or more data files may 
be included on the CD-ROM 25, in which case the program 
would select a desired one of the data files to generate 
write data for the PCMCIA card 27 (based, e.g., on a user's 
selection) . Because the program and data both reside on the 
same CD-ROM, there is no need to swap discs in the middle of 
the program. In these embodiments, the data files are 
preferably encrypted to prevent unauthorized access. 

In alternative embodiments, the data that is to be 
written into the PCMCIA card 27 is embedded within the same 
file that is being executed by the computer. In this case, 
3 0 only a single file is needed on the CD-ROM 2 5 to generate 
write data for the PCMCIA card 27. Optionally, more than 
10 
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one such combined program/data file may be included on the 
CD-ROM 25, and the user can select which program to run. 
This arrangement also eliminates the need to swap discs in 
the middle of the program. In these embodiments, the 
5 portions of the combined program/data files that control the 
data extraction and writing process are preferably encrypted 
to prevent unauthorized access. 

In another alternative embodiment, the application 
program is stored on the computer' s hard drive (not shown) , 

10 and the data that is to be written into the PCMCIA card 2 7 
is stored on the CD-ROM 25. Optionally, more than one data 
file may be included on the CD-ROM 25, and the user can 
select which file to use. In this embodiment, the data 
files are preferably encrypted to prevent unauthorized 

15 access. In a less preferred embodiment, the program and 
data may be stored on separate CD-ROMS, but disc swapping 
would be required. 

Execution of the program begins at step S51, where the 
system checks that the CD-ROM with the write data and the 

2 0 PCMCIA card 2 7 are both inserted into their respective bays 

on the computer. If either the CD-ROM 25 or the PCMCIA card 
27 is not inserted, an appropriate prompt is displayed to 
the user. In embodiments where the program and data are 
incorporated into the same CD-ROM 25, the step of checking 
25 for the CD-ROM may be omitted. 

When the CD-ROM 25 contains more than one file, the 
user is prompted to select a desired file for writing to the 
PCMCIA card 27 in step S52, and the user's selection is 
noted by the system. When the CD-ROM 25 contains only one 

3 0 file, this step is preferably skipped. 
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In step S53, payment for the selected file is 
processed. Preferably, this includes the step of 

determining a price for transferring the file from the CD- 
ROM 25 to the PCMCIA card 27. The price may be determined 
5 by referencing price information stored on the CD-ROM 2 5 
itself, preferably in a non-encrypted format. Alternative 
ways to determine the price include obtaining a price for 
the desired file from the Internet by sending an appropriate 
request to the remote server 21 via the Internet 23, and 

10 waiting for a response from the remote server. Next, the 
price for the selected file is presented to the user via the 
user interface 31, and the user is given an opportunity to 
pay for the selected file. Any desired payment plan may be 
implemented, such as pay-per-download, pay per Mbyte, or a 

15 flat annual or monthly rate for unlimited use. 

Preferably, the payments are processed (or prior 
payments are verified) by communicating with the remote 
server 21 via the Internet 23 in any conventional manner, 
using an appropriate user interface (e.g., by charging a 

2 0 credit card provided by the user, or by charging an account 
that has been pre-established with the user) . Optionally, 
the server may confirm the identity of the local computer's 
user (using, for example, a password or a cookie) and reject 
unauthorised users. After the payment information has been 

25 received by the remote server 21, the remote server 21 sends 
a decryption key to the local computer 20 via the Internet 
23. In alternative embodiments, the decryption key may be 
provided in other ways such as via fax, telephone, email, 
etc. In step S54, this decryption key is accepted and 

30 provided to the decryption process 32. 
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Preferably, the decryption process is configured to 
treat the encrypted file as a plurality of blocks, and to 
decrypt one block at a time. The size of each of these 
blocks may be selected so that when the encrypted block is 
5 eventually decrypted, the resulting decrypted data will be 
an integer multiple of a block size associated with the 
hardware in the destination PCMCIA card 27. For example, if 
the block size for the destination PCMCIA card 27 is 1024 
bytes, the size of the decrypted blocks of data would 
10 preferably be 1024, 2048, or 3072 bytes, etc. 

In step S55, the decryption process 32 uses the 
decryption key received in step S54 to decrypt the first 
block of data from the selected file in the CD-ROM 25, 
resulting in a corresponding block of decrypted data. 

15 In some embodiments, step S56 is implemented in order 

to provide an additional degree of assurance that 
programming of the PCMCIA card 27 has been authorized. In 
these embodiments, the application program sends an inquiry 
to the remote server 21 via the Internet 2 3 to determine if 

2 0 programming of the PCMCIA card 2 7 has been authorized. 
Preferably, the remote server 21 is programmed to provide 
authorization only when payment for programming has been 
made. If authorization to proceed is received from the 
remote server 21, processing continues to step S57. But if 

25 authorization to proceed is not received from the remote 
server 21, programming of the PCMCIA card 27 will be 
aborted. Note that while step S56 is illustrated as 
occurring between the read and write operations in the loop, 
the authorization check could be moved to another position 

30 in the loop (e.g., after the write operation). 
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In alternative embodiments, more complicated 
authorization verification schemes may be implemented. For 
example, each block of the data file may be encrypted 
individually, so that each block requires its own decryption 
5 key. In this case, once the decryption of a single block 
has been completed, the system requests the decryption key 
for the next block from the remote server 21. If the next 
decryption key is received, the decryption process can 
continue. But if the next decryption key is not received, 
10 the decryption process terminates before all the desired 
data is written onto the PCMCIA card 27 . 

In other alternative embodiments, step S56 may be 
omitted altogether, and the program may rely on the receipt 
of a decryption key (in step S54) as an indication of 
15 authorization to program the PCMCIA card 27. 

In step S57, the current block of decrypted data is 
written into the PCMCIA card 27. Preferably, this is 
accomplished by invoking a suitable card programming 
subroutine 33, which sends appropriate instructions to the 

20 hardware interface 35. The hardware interface 35 then sends 
appropriate signals into the PCMCIA card 2 7 to program the 
card. The card programming subroutine 33 and the hardware 
interface 35 may be implemented using any of a variety of 
well known techniques for programming a block of data in a 

25 PCMCIA card. The particulars of these techniques may depend 
on the specific model of PCMCIA card being programmed. 

After the current block of data has been written into 
the PCMCIA card 27, processing proceeds to step S58, where a 
test is performed to determine whether any additional data 
30 from the selected file needs to be written into the PCMCIA 
card 27. If there is additional data, control of the 
14 
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program returns to step S55 for processing of the next block 
of data. If there is no additional data, control of the 
program passes to step S59. 

When the data from the selected file is divided into a 
5 plurality of blocks, the arrangement of steps S55-S58 into a 
loop results in an interleaving of the decryption and 
writing processes. For example, if the data is divided into 
3 blocks, the temporal sequence of events would be as 
follows: (1) decrypt the first block; (2) write the first 
10 block; (3) decrypt the second block; (4) write the second 
block; (5) decrypt the third block; and (6) write the third 
block. 

Preferably, access to each block of data is prevented 
after that block is written into the PCMCIA card 27. This 

15 may be accomplished, for example, by erasing each block of 
data after execution of the write operation, or by 
overwriting the previously decoded block of data with new 
data when the next block of data is decoded. When this 
approach is used, there will never be a time when the entire 

2 0 file exists in the memory of the computer 20 in a decrypted 
form. And when a complete decrypted version of the file 
does not exist, it becomes much more difficult to make an 
unauthorized copy of the decrypted data. In a less 
preferred embodiment, the decryption process treats the 

25 encrypted file as a single large block. But using a single 
large block is not as advantageous as using multiple blocks, 
because a complete decrypted version of the file would exist 
(at least for a short while) . 

In step S59, a notification that the write process has 
30 been completed is provided to the user (e.g., by 
illuminating an indicator, by displaying an appropriate text 
15. 
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message, by generating a beep or another sound, or in any 
other appropriate manner) . Preferably, the user is prompted 
to remove the PCMCIA card 27 and to insert it into the 
target device. Depending on the particular PCMCIA card 27 
5 being programmed, the user may be instructed to shut down 
the computer 2 0 before removing the PCMCIA card 27. Once 
the PCMCIA card 27 has been installed in the target device, 
the program and/or data that was just written to the card 
can be accessed by the target device. 

10 Optionally, the files on the CD-ROM 25 may be stored in 

a compressed format. When this option is implemented, the 
data from the CD-ROM 2 5 must be decompressed as well as 
decrypted. 

The purpose of • the second embodiment described in 
15 connection with FIGS. 4 and 5 is to enable authorized users 
to load a program (or data to be used by a program) into a 
PCMCIA card 27 based on data obtained from a remote server, 
preferably via the Internet 23, and to prevent unauthorized 
copies from being made. Writing of the data to the PCMCIA 

2 0 card 2 7 is not permitted unless the user has paid for the 

data. This embodiment is preferably used when the volume of 
data to be written into the PCMCIA card 27 is small enough 
so that the transmission delay will not be too annoying. 

FIG. 4 is a schematic block diagram illustration of 
25 some of the processes implemented in the computer 20, and 
the flow of data through the system that occurs when those 
processes are implemented. It is best understood when 
viewed in connection with FIG. 5, which is a flowchart of 
the implemented processes. In the following discussion, 

3 0 ordinary reference numbers can be found in FIG. 4, and 
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reference numbers preceded with an "S" can be found in FIG. 
5. 

Operation of the elements 2 0-33 in this embodiment are 
similar to the corresponding elements in the first 
5 embodiment, except that the data for programming the PCMCIA 
card 27 is obtained from the remote server 21 instead of 
from the CD-ROM 25, and decryption is not required. 

As in the first embodiment, the application program may- 
be stored in any conventional manner (e.g., on a CD-ROM or 
10 on a hard disk) and launched in any conventional manner. 
Execution of the program begins at step S151, where the 
system checks that the PCMCIA card 27 is inserted into its 
bay on the computer. If the PCMCIA card 27 is not inserted, 
an appropriate prompt is displayed to the user. 

15 When more than one file is available for downloading 

from the remote server 21, the user is prompted to select a 
desired file for transferring to the PCMCIA card 27 in step 
S152, and the user's selection is noted by the system. When 
only one file is available for downloading, this step is 

2 0 preferably skipped. 

In step S153, payment for the selected file is 
processed. Preferably, this includes the step of 

determining a price for transferring the file to the PCMCIA 
card 27 by sending an appropriate request to the remote 
25 server 21 via the Internet 23, and waiting for a response 
from the remote server. Next, the price for the selected 
file is presented to the user via the user interface 31, and 
the user is given an opportunity to pay for the selected 
file. If the user agrees to the price, the user authorizes 

3 0 payment (e.g., by providing a credit card number or clicking 
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on an icon that authorizes payment to a debit or credit 
account) , and the computer sends information to the remote 
server 21 to indicate that payment has been authorized. 

In some embodiments, the remote server accepts the 
5 payment information and sends a verification that payment 
has been received back to the computer 20. This 
verification is interpreted by the computer 2 0 as an 
authorization to proceed. In other embodiments, the remote 
server accepts the payment information and immediately 
10 begins sending the requested data back to the computer 20. 
In these embodiments, receipt of . the requested data is 
interpreted by the computer 2 0 as an authorization to 
proceed. 

After payment has been made, the remote server 21 
15 begins to send the selected file to the computer 2 0 via the 
Internet 23. Preferably, the remote server 21 is configured 
to treat the file as a plurality of blocks, to send one 
block to the computer 20 at a time, and to pause after each 
block has been sent. The size of each of these blocks may 

2 0 be selected in a manner similar to the first embodiment 

described above. 

In step S155, the block of data arriving from the 
server is accepted and stored in a temporary buffer. 

Optionally, step S156 may be implemented to provide an 
25 additional degree of assurance that programming of the 
PCMCIA card 2 7 has been authorized. Its operation is 
similar to step S56, which is described above in connection 
with the first embodiment. Optionally, authorization to 
continue may be implemented implicitly by having the server 

3 0 restart data transmission after a pause in transmission. 
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Step S156 may also be omitted altogether, and the program 
may rely on the receipt of data (in step S155) as an 
indication of authorization to program the PCMCIA card 27. 

In step S157, the current block of data is written from 
5 the temporary buffer into the PCMCIA card 27. Preferably, 
this is accomplished by invoking a suitable card programming 
subroutine 33, which sends appropriate instructions to the 
hardware interface 35, as described above in connection with 
the first embodiment. 

10 After the current block of data has been written into 

the PCMCIA card 27, processing proceeds to step S158, where 
a test is performed to determine whether any additional data 
from the selected file needs to be written into the PCMCIA 
card 27. If there is additional data, control of the 

15 program returns to step S155 for processing of the next 
block of data. If there is no additional data, control of 
the program passes to step S159, where a notification is 
provided to the user that the write process has ended 
(similar to step S159 described above in connection with the 

20 first embodiment) . The newly programmed PCMCIA card 27 may 
then be installed in the target device. 

When the data from the selected file is divided into a 
plurality of blocks, the operation of steps S155-S158 
results in an interleaving of the reading and writing 
25 processes. For example, if the data is divided into 3 
blocks, the temporal sequence of events would be as follows: 
(1) read- the first block; (2) write the first block; (3) 
read the second block; (4) write the second block; (5) read 
the third block; and (6) write the third block. 
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As in the first embodiment, access to each block of 
data is preferably prevented after that block is written 
into the PCMCIA card 27. This may be accomplished, for 
example, by erasing the temporary buffer after execution of 
5 the write operation, or by overwriting the previously 
decoded block of data in the temporary buffer with new data 
whenever a new block of data is decoded. When this approach 
is used, there will never be a time when the entire file 
exists in the memory of the computer 20, which makes it more 
10 difficult to make an unauthorized copy of the data. 

FIG. 6 is a schematic hardware block diagram of the 
third and fourth embodiments, and FIGS. 7 and 8 are 
functional block diagram for the third and fourth 
embodiments respectively. The third and fourth embodiments 
15 are similar to the first and second embodiments described 
above, except that the PCMCIA card and interface are 
replaced with a target device 128 and a data port 126. The 
target device 128 includes a memory 127, which may be 
permanently' installed within the target device 12 8, or may 

2 0 be removably connected in the target device 128 using a 

suitable connector. As in the first and second embodiments, 
each of the components 20-25 may be replaced with various 
substitutes . 

Preferably, one of the standard ports of the computer 
25 20 (e.g., an RS-232 serial port, a Centronics parallel port, 
or a USB port) serves as the data port 126. An interface 
cable connects the data port 126 with the target device 128. 
The configuration of this interface between the computer 2 0 
and the target device 128 will depend on the particular 

3 0 target device being used. For example, if a Palm™ PDA is 

being used, the interface will have a cradle that mates with 
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the PDA at one end, and a 9 pin serial connector at the 
other end. The computer and the target device 12 8 establish 
a communication link with each other via this interface. 
Alternatively, a wireless communication link may be used 
5 (using, e.g., infrared or radio- frequency wireless signals). 

In the first and second embodiments, a plug-in module 
is reprogrammed while it is connected to a computer, and the 
plug- in module is subsequently removed from the computer and 
plugged into the target device. The end result is to modify 
10 either the program memory or the data memory of the target 
device . 

In contrast, the target device in the third and fourth 
embodiments modifies its own program memory or data memory, 
in accordance with write instructions that are received via 
the communication interface. Operation of these embodiments 
is similar to operation of the first and second embodiments, 
except that instead of writing data to a PCMCIA card 2 7 
(shown in FIG. 2) by sending appropriate signals to a PCMCIA 
card interface 35 (shown in FIG. 2) , the third and fourth 
embodiments write data to a memory 127 in the target device 
128 by sending appropriate signals to a device interface 
135. Details regarding the signal formats, the instructions 
that must be sent to the target device 12 8 to initiate the 
write operation, and the device interface 135 will depend on 
the particular target device 128 being used. 

The processes implemented in the third embodiment are 

similar to the processes described in connection with FIG. 

3, except that (1) instead of prompting a user to insert or 

remove a PCMCIA card, the user is prompted to attach or 

3 0 detach the target device 128; and (2) instead of writing 

data directly to a PCMCIA card, data is written to the 
21 
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memory 127 in the target device 128 by sending appropriate 
write instructions to the target device via device interface 
135. Similarly, the processes implemented in the fourth 
embodiment are similar to the processes described in 
5 connection with FIG. 5, with the same two exceptions. 

While the present invention has been explained in the 
context of the preferred embodiments described above, it is 
to be understood that various changes may be made to those 
embodiments, and various equivalents may be substituted, 
10 without departing from the spirit or scope of the invention, 
as will be apparent to persons skilled in the relevant art. 
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WHAT IS CLAIMED IS: 

1. A method of writing data into a memory contained in a 
plug-in module, the method comprising the steps of: 
5 accepting the plug- in module in a connector configured 

to interface with the plug- in module; 

reading first data from a data storage device; 

obtaining an access control code that permits 
generation of second data based on the first data; 
10 generating second data based on the first data read in 

the reading step and the access control code obtained in the 
obtaining step; 

writing to the memory contained in the plug-in module 
based on the second data generated in the generating step; 
15 preventing access to the second data after execution of 

the writing step; and 

providing a notification after completion of the 
writing step. 

20 2. The method of claim 1, wherein the first data 
comprises encrypted data, the access code comprises a key 
for decrypting the encrypted data, and the second data 
comprises a decrypted version of the first data, and wherein 
the generating step comprises the step of decrypting the 

25 first data, using the key, so that the second data is 
formed . 

3. The method of claim 2, further comprising the step of 
inserting the plug-in module into a target device. 

30 

4. The method of claim 2, wherein the generating step 
comprises the steps of periodically obtaining 
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authorization to continue via the Internet, and 
aborting the generating step if authorization to 
continue is not obtained when expected. 

5 5. The method of claim 2, wherein the plug-in module 
comprises a PCMCIA card. 

6. The method of claim 2, wherein the reading, 
generating, writing, and preventing steps for a first block 

10 of data are all performed prior to the reading, generating, 
writing, and preventing steps for a second block of data. 

7. The method of claim 2, wherein the preventing step 
comprises the step of erasing the second data or overwriting 

15 the second data. 

8. The method of claim 2, wherein the data storage 
device comprises a CD-ROM. 

20 9. The method of claim 2, wherein, in the obtaining 
step, the access control code is obtained via the Internet. 

10. The method of claim 2, wherein the access control 
code obtained in the obtaining step is provided by a remote 

2 5 server in response to receipt of a payment. 

11. The method of claim 2, wherein the reading, 
generating, writing, and preventing steps for a first block 
of data are all performed prior to the reading, generating, 

3 0 writing, and preventing steps for a second block of data, 

wherein the preventing step comprises the step of 
erasing the second data or overwriting the second data, 
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wherein the data storage device comprises a CD-ROM, 
wherein, in the obtaining step, the access control code 

is obtained via the Internet, and 

wherein the access control ■ code obtained in the 
5 obtaining step is provided by a remote server in response to 

receipt of a payment . 

12. A method of writing data into a memory contained in a 
target device, the method comprising the steps of: 

10 establishing a communication link with the target 

device; 

reading first data from a data storage device; 

obtaining an access control code that permits 
generation of second data based on the first data; 
15 generating second data based on the first data read in 

the reading step and the access control code obtained in the 
obtaining step; 

sending signals, via the communication link, into the 
target device, wherein the signals comprise instructions for 
2 0 writing to the target device and are based on the second 
data generated in the generating step; 

preventing access to the second data after execution of 
the sending step; and 

providing a notification after completion of the 

2 5 sending step. 

13. The method of claim 12, wherein the first data 
comprises encrypted data, the access code comprises a key 
for decrypting the encrypted data, and the second data 

3 0 comprises a decrypted version of the first data, and wherein 

the generating step comprises the step of decrypting the 
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first data, using the key, so that the second data is 
formed . 

14. The method of claim 13, further comprising the 
5 step of disconnecting the communization link with the 

target device so that the target device can be operated 
independently in a standalone mode. 

15. The method of claim 13, wherein the generating step 
10 comprises the steps of periodically obtaining 

authorization to continue via the Internet, and 
aborting the generating step if authorization to 
continue is not obtained when expected. 

15 16. The method of claim 13, wherein the reading, 
generating, sending, and preventing steps for a first block 
of data are all performed prior to the reading, generating, 
sending, and preventing steps for a second block of data. 

20 17. The method of claim 13, wherein the preventing step 
comprises the step of erasing the second data or overwriting 
the second data. 

18. The method of claim 13, wherein the data storage 
25 device comprises a CD-ROM. 

19. The method of claim 13, wherein, in the obtaining 
step, the access control code is obtained via the Internet. 

30 20. The method of claim 13, wherein the access control 
code obtained in the obtaining step is provided by a remote 
server in response to receipt of a payment . 
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21. The method of claim 13, wherein the reading, 
generating, sending, and preventing steps for a first block 
of data are all performed prior to the reading, generating, 
5 sending, and preventing steps for a second block of data, 

wherein the preventing step comprises the step of 
erasing the second data or overwriting the second data, 

wherein the data storage device comprises a CD-ROM, 

wherein, in the obtaining step, the access control code 
10 is obtained via the Internet, and 

wherein the access control code obtained in the 
obtaining step is provided by a remote server in response to 
receipt of a payment. 

15 22 . A method of writing data into a memory contained in a 
plug-in module, the method comprising the steps of: 

accepting the plug- in module in a connector configured 
to interface with the plug-in module; 

providing payment information to a remote server, 
2 0 waiting to receive an authorization to proceed from the 

remote server in response to the payment information 
provided in the providing step; 

receiving data from the remote server; 

writing data into the memory contained in the plug-in 
25 module based the data received in the receiving step; 

preventing access to the data received in the receiving 
step after execution of the writing step; and 

providing a notification after completion of the 
writing step. 

30 

23. The method of claim 22, further comprising the step 
of inserting the plug-in module into a target device. 
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24. The method of claim 22, wherein the plug-in module 
comprises a PCMCIA card. 

5 25. The method of claim 22, wherein the receiving, 
writing, and preventing steps for a first block of data are 
all performed prior to the receiving, writing, and 
preventing steps for a second block of data. 

10 26. The method of claim 22, wherein the data received in 
the receiving step comprises the authorization in the 
waiting step. 

27. The method of claim 22, wherein the notification 
15 providing step comprises the step of notifying a user that 

the plug- in module may be removed from the connector. 

28. The method of claim 22, wherein, in the providing 
step, the payment information is provided to the remote 

2 0 server via the Internet, and 

wherein, in the receiving step, the data is received 
from the remote server via the Internet . 

29. The method of claim 22, wherein the preventing step 
25 comprises the step of erasing the data received in the 

receiving step or overwriting the data received in the 
receiving step. 

30. The method of claim 22, wherein the receiving, 
30 writing, and preventing steps for a first block of data are 

all performed prior to the receiving, writing, and 
preventing steps for a second block of data, 
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wherein the notification providing step comprises the 
step of notifying a user that the plug- in module may be 
removed from the connector, 

wherein, in the providing step, the payment information 
5 is provided to the remote server via the Internet, 

wherein, in the receiving step, the data is received 
from the remote server via the Internet, and 

wherein the preventing step comprises the step of 
erasing the data received in the receiving step or 
10 overwriting the data received in the receiving step. 

31. A method of writing data into a memory contained in a 
target device, the method comprising the steps of: 

establishing a communication link with the target 
15 device; 

providing payment information to a remote server, 

waiting to receive an authorization to proceed from the 
remote server in response to the payment information 
provided in the providing step; 
2 0 receiving data from the remote server; 

sending signals, via the communication link, into the 
target device, wherein the signals comprise instructions for 
writing to the target device and are based on the data 
received in the receiving step; 
2 5 preventing access to the data received in the receiving 

step after execution of the sending step; and 

providing a notification after completion of the 
sending step. 

30 32. The method of claim 31, further comprising the 
step of disconnecting the communi zat ion link with the 
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target device so that the target device can be operated 
independently in a standalone mode. 

33. The method of claim 31, wherein the receiving, 
5 sending, and preventing steps for a first block of data are 

all performed prior to the receiving, sending, and 
preventing steps for a second block of data. 

34. The method of claim 31, wherein the data received in 
10 the receiving step comprises the authorization in the 

waiting step. 

35. The method of claim 31, wherein the notification 
providing step comprises the step of notifying a user that 

15 the target device may be disconnected. 

36. The method of claim 31, wherein, in the providing 
step, the payment information is provided to the remote 
server via the Internet, and 

2 0 wherein, in the receiving step, the data is received 

from the remote server via the Internet . 

37. The method of claim 31, wherein the preventing step 
comprises the step of erasing the data received in the 

25 receiving step or overwriting the data received in the 
receiving step. 

38. The method of claim 31, wherein the receiving, 
sending, and preventing steps for a first block of data are 

3 0 all performed prior to the receiving, sending, and 

preventing steps for a second block of data, 
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wherein the notification providing step comprises the 
step of notifying a user that the target device may be 
disconnected, 

wherein, in the providing step, the payment information 
5 is provided to the remote server via the Internet, 

wherein, in the receiving step, the data is received 
. from the remote server via the Internet, and 

wherein the preventing step comprises the step of 
erasing the data received in the receiving step or 
10 overwriting the data received in the receiving step. 

39. A method of using a computer to write data into a 
memory for an electronic device, the method comprising the 
steps of : 

15 loading data into the computer from a data source; 

establishing a removable connection between the 
computer and the memory for the electronic device; 
determining if a payment has been made; 
writing the data into the memory for the electronic 
20 device, via the connection, in response to a determination 
that a payment has been made; 

removing, after completion of the writing step, the 
removable connection between the computer and the memory for 
the electronic device; and 
25 operating the electronic device independently of the 

computer, after completion of the removing step, using the 
data written in the writing step. 

40. The method of claim 39, wherein the memory for the 
3 0 electronic device is housed in a plug- in module. 
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41. The method of claim 39, wherein the memory for the 
electronic device is housed in a PCMCIA card. 
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